Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Trojan?


  • Please log in to reply
1 reply to this topic

#1 mcferr

mcferr

  • Members
  • 2 posts
  • OFFLINE
  •  
  • Local time:11:24 PM

Posted 16 May 2005 - 01:01 AM

Can u help?
Norton Antivirus has found PWSteal.Trojan and am getting a message that Norton has deleted it. But apparently, it keeps coming back because Norton messages number in the hundreds..!
Now have another msg from Norton saying unable to repair file. Filename is csrsss.exe. I can see the file in System32 folder, but cannot delete it. I've run regedit and it does not appear there.
I am so confused! I'm also concerned that my system is infected with some password steal problem...
I've run several system scans, have also run in Safe Mode, have disabled the System Restore function in XP, all to no avail.
Please, please help! Thanks so much!


Mod Edit: This will be moved to a more appropriate Forum.

Edited by scarlett, 16 May 2005 - 06:49 AM.


BC AdBot (Login to Remove)

 


#2 pip22

pip22

  • Banned
  • 341 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:05:24 AM

Posted 16 May 2005 - 05:59 AM

Open a command prompt box in Windows (Start - All Programs - Accessories - Command Prompt) Now Open Task Manager and in processes list, highlight EXPLORER.EXE and end that process. All you will have is a bare desktop with just the DOS box. Using the command line, navigate to the folder where csrsss.exe is located. Now type DEL CSRSSS.EXE and press ENTER. That should delete it. Now open task manager again and on the USERS tab, click 'LOG OFF'. Now log on again and explorer.exe will re-load.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users